Servlet 2.4 12.8.1 Combining ConstraintsServlet 3.0 13.8.1 Combining Constraints The special case of an authorization constraint that names no roles shall combine with any other constraints to override their affects and cause access to be precluded.